AMENDMENTS 



IN THE CLAIMS 



1. (currently amended) A method for processing network management data 
received by a network management system during network the monitoring of a n e twork , said the 
method comprising: 

receiving network management data, and 

determining in real-time if said the network management data indicates a the resolution 
of a previous event generated by said the network management system in response to previously 
received network management data, 

maintaining an event list, said event list comprising a severity indicator of said previous 

event; 

automatically changing said a severity indicator of said previous event dependent on said 
determining step, and 

then automatically removing said previous event from a memory of said the network 
management system, depending on said severity indicator. 

2. (currently amended) A method as claimed in claim 1, wherein, if said the 
network management data indicates said the resolution of a previous event, said the method 
further comprises marking said the previous event as resolved. 



3. (currently amended) A method as claimed in claim 1, wherein said the network 
management data is processed in response to said the network management system receiving 
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network management data from said the network. 



4. (currently amended) A method as claimed in claim 1, said the network 
management data comprising values of a monitored characteristic of a part of said the network 
for which an event is generated if said the monitored value exceeds a predetermined threshold, 
wherein an said event list includes an unresolved previous event for said the monitored 
characteristic, wherein said the step of receiving network management data comprises receiving 
a value for said the monitored characteristic, and said the step of determining comprises 
considering whether said the monitored value has been below said the predetermined threshold 
for a preceding time period, and if so determining that said the received value indicates said the 
resolution of said the unresolved previous event. 

5. (currently amended) A method as claimed in claim 4, wherein said the step of 
considering comprises, in response to receiving said the network management data, comparing a 
first received value for said the monitored characteristic with said the predefined threshold, and 
if the value is below said the predefined threshold, starting a timer, said the timer expiring at said 
the end a predefined time period. 

6. (currently amended) A method as claimed in claim 5, wherein said the step of 
considering further comprises comparing each subsequent received value for said the monitored 
characteristic with said the predefined threshold, and if any value exceeds said the threshold 
canceling said the timer. 
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7. (currently amended) A method as claimed in claim 5, wherein, when said the 
timer expires, determining that said the monitored value has been below said the predetermined 
threshold for said the preceding time period. 
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8. (currently amended) A method for processing data representing a monitored 
characteristic of a part of a the network in a network management system, said the method 
comprising: 

periodically receiving a value for said the monitored characteristic; if a received value 
exceeds a predetermined threshold for said the monitored characteristic generating an event; and 
thereafter, 

periodically considering whether said the monitored value has been below said the 
predetermined threshold for a preceding time period, and if so 
determining in real-time that said the event is resolved 

maintaining an event list, said event list comprising a severity indicator of said previous 

event; 

and 

automatically changing said a severity indicator of said generated event, wherein said the 
severity indicator establishes whether said the said event should be automatically removed from 
a memory of said the network management system. 

9. (original) A method as claimed in claim 8, wherein said the preceding time 
period is an immediately preceding predetermined time period, and said the step of periodically 
considering comprises considering whether said the monitored value has been below said the 
predetermined threshold for said the immediately preceding time period in response to each 
subsequently received value. 
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10. (original) A method as claimed in claim 8, wherein if said the step of 
considering determines that said the event is resolved, said the method further comprises 
marking said the event as resolved. 

11. (currently amended) A method as claimed in claim 1, said the network 
management data relating to an asynchronous Trap being received by said the network 
management system, wherein said the step of determining comprises considering if said the Trap 
indicates said the possible resolution of an event in an event log. 

12. (currently amended) A method as claimed in claim 11, wherein if said the Trap 
indicates said the possible resolution of an event in an event log, said the step of determining 
further comprises considering whether said the event log includes a previously received event 
that is resolved by said the Trap. 

13. (cancelled without prejudice) A method for processing data received in an 
asynchronous Trap by a network management system, the method comprising: 

receiving a Trap from the network; 

automatically determining if the received Trap is a reportable condition, and if so 
considering if the Trap indicates the possible resolution of a event in an event log, and if 

so 

further considering in real-time if the Trap indicates the possible resolution of a further 
event in the event log. 
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14. (cancelled without prejudice) A method as claimed in claim 1, wherein the 
method processes network management data previously received by the network management 
system and stored in the memory. 



15. (cancelled without prejudice) A method as claimed in claim 14, wherein the step 
of receiving network management data comprises receiving event data relating to an event stored 
in memory, in response to a scan of previously generated events stored and included in an event 
log. 

16. (cancelled without prejudice) A method as claimed in claim 15, wherein the event 
data relates to a recurring event and includes the time of the last occurrence of the event. 

17. (cancelled without prejudice) A method as claimed in claim 16, wherein the step 
of determining comprises comparing the present time with the time of the last occurrence of the 
event, and, if the time difference is greater than a predetermined time interval, determining that 
the event is resolved. 



18. (cancelled without prejudice) A method as claimed in claim 17, wherein if the 
step of determining determines that the event is resolved, the method further comprises marking 
the recurring event as resolved. 

19. (currently amended) A method for processing event data generated by a network 
management system during the monitoring of a network, said the method processing event data 
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relating to events previously generated by said the network management system a plurality of 
times and which may be entered in the an event log as a recurring event, said the method 
comprising 

maintaining said event log, said event log comprising a plurality of severity indicators; 
determining in real-time if an event has already been logged a predetermined number of 
times in said an event log list, and if so 

automatically identifying said the event; and 

considering whether the condition which caused said the event to be generated has 
occurred in a preceding time period. 

20. (currently amended) A method as claimed in claim 19, wherein, if said the step 
of considering determines that said the condition which caused said the event to be generated has 
not occurred in the preceding time period, determining said the event to be resolved. 

21. (currently amended) A method as claimed in claim 20, further comprising 
marking said the event in said the event list as resolved. 



22. (currently amended) A computer readable medium including a computer 
program for processing network management data received by a network management system 
during the monitoring of a network; the program comprising 

a program step for receiving network management data and for determining in real-time 
if said the network management data indicates a the resolution of a previous event generated by 
the network management system in response to previously received network management data, 
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maintaining an event list, said event list comprising a severity indicator of said previous 



event; 

automatically changing said a severity indicator of said previous event dependent on said 
determining step, 

and then automatically removing said previous event from a memory of the network 
management system, depending on said severity indicator. 

23. (currently amended) A network management system for processing network 
management data received during a the monitoring of a network, said the system comprising: 

a processor for receiving network management data and determining in real-time if said 
the network management data indicates a the resolution of a previous event generated by said the 
network management system in response to previously received network management data, 

maintaining an event list, said event list comprising a severity indicator of said previous 

event; 

automatically changing said a severity indicator of said previous event dependent on said 
determining step, and then 

automatically removing said previous event from a memory of the network management 
system, depending on said severity indicator. 

24. (currently amended) A network management system as claimed in claim 23, 
wherein said the memory is configured to store data relating to events generated by said the 
network management system, wherein if said the processor determines that received network 
management data indicates said the resolution of a previous event stored in said the memory, 
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said the processor updates said the memory to mark said tfee previous event as resolved. 



25. (previously amended) A network management system as claimed in claim 24, 
further comprising means for presenting an event list of generated events to a user. 
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